Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
File:                     436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json)
Hash identifier:          qw9HMLdqlHUnZgxX7lCJsqRjD/HZekGdwr9njU+0FDA=
Subject key identifier:   A8:B4:CF:1E:1D:88:3C:32:3B:BF:DC:1B:C5:CB:AE:F6:36:4E:C7:04
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       5EA26C06C8950394E460A27837715743BEB1CFEA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
Manifest number:          02D1
Signing time:             Sun 14 Jun 2026 05:01:25 +0000
Manifest this update:     Sun 14 Jun 2026 04:56:25 +0000
Manifest next update:     Mon 15 Jun 2026 05:19:25 +0000
Files and hashes:         1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: cFDfHzBHdAZl0TReDFbmpsYTKY6dIq8BWZb70GDoydw=)
                          2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: ULeIx7PkK+TLaNmR9zG6h6Q9HvoswpT/1QtupqOtgmQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a2:6c:06:c8:95:03:94:e4:60:a2:78:37:71:57:43:be:b1:cf:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: Jun 14 04:56:25 2026 GMT
            Not After : Jun 15 05:19:25 2026 GMT
        Subject: CN=A8B4CF1E1D883C323BBFDC1BC5CBAEF6364EC704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:c3:3d:39:b2:34:87:4c:a7:64:31:7c:41:
                    39:ca:ed:de:e2:9b:95:2d:0c:62:a0:f4:ef:fe:cf:
                    e9:ee:a6:b6:69:62:cf:2c:0a:09:bb:2b:9f:56:f6:
                    73:c6:ce:ec:57:66:83:15:51:aa:54:ff:2a:51:2c:
                    f0:fe:8f:18:41:a8:f6:ce:f5:26:9f:dc:8b:7e:92:
                    7e:81:b8:2b:c2:af:28:7c:2b:0b:54:41:85:8b:c9:
                    2a:17:50:61:a9:24:17:45:1b:63:8b:a4:be:83:83:
                    4f:3a:45:d0:3a:15:6d:f2:a0:18:5e:26:42:f6:6f:
                    2e:55:91:57:78:b4:3b:a0:6f:58:a3:16:f3:fb:97:
                    5c:19:12:10:81:c3:b2:fe:ad:d3:0d:18:e7:16:7c:
                    4c:a1:92:ed:32:ff:86:f1:b6:8d:39:b5:58:3d:1d:
                    af:9b:d0:f5:41:a2:70:b0:9d:cf:d6:33:c0:c0:00:
                    28:c8:49:ee:ef:a6:6c:a3:f2:7f:98:49:9b:c1:ad:
                    66:0b:46:ea:17:98:f0:84:c6:cb:29:65:1d:0d:b5:
                    9f:00:53:8b:20:5e:1e:ff:78:74:ec:1a:08:13:f5:
                    21:5e:5b:0a:81:93:d8:3d:15:85:e5:ad:2f:26:22:
                    bf:37:9f:ed:0e:fa:06:f6:c9:aa:79:f6:23:bd:26:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B4:CF:1E:1D:88:3C:32:3B:BF:DC:1B:C5:CB:AE:F6:36:4E:C7:04
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:89:b8:01:90:a7:16:14:8d:e3:40:33:7c:3b:ae:34:bf:f2:
         e4:d1:e7:d6:dd:7a:ef:07:2c:1f:a0:dd:22:35:e7:fc:7f:1b:
         8a:a0:1f:68:ad:90:3f:83:d0:84:bc:37:c1:a5:aa:23:12:80:
         d9:48:88:7b:8a:be:1b:01:3d:2b:5d:37:34:a9:e7:ca:08:5c:
         a3:92:60:cb:87:2b:a1:8e:32:9c:41:ae:56:59:b4:9d:ca:2e:
         f3:e3:86:8e:fa:93:cd:e8:82:64:87:93:ba:e2:44:e9:2c:ba:
         09:50:61:ac:8a:fb:d7:d4:8d:e6:37:cb:6e:d9:3e:34:2a:38:
         d8:1c:9f:13:4d:5a:05:0f:0e:1d:c4:9c:04:d7:50:0b:61:ed:
         63:4e:bd:0e:98:76:4b:52:af:41:e2:95:20:1a:fa:e2:97:a1:
         a6:64:4a:40:14:39:2f:1b:40:6c:b2:0a:e8:ea:3b:e9:a1:bd:
         e0:f5:19:22:c8:b3:a8:ad:2b:c9:ab:a6:a8:c7:a2:3a:d1:51:
         df:99:ab:f1:fe:c8:ee:ba:0f:aa:29:d9:67:62:7e:59:33:d6:
         1b:4e:0a:85:66:3a:97:de:b4:f0:ba:a9:3f:58:7a:86:f4:b5:
         28:cf:f5:89:2a:cc:53:67:a0:ad:08:7f:38:f2:5e:80:8c:df:
         ce:c9:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:11:17 2026 by rpki-client